diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index 793ad42..8a3100b 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -1,6 +1,8 @@
 # Note that the matching is done with re.match()
 .+:
   sunet::server:
+    unattended_upgrades: true
+    install_scriptherder: true
   rut:
   sunet::nagios::nrpe:
     checks: